Gel4y Mini Shell by Indonesian Darknet

Gel4y Mini Shell by Indonesian Darknet
Another PHP web shell that promises it can bypass ‘server security’.
Read more →

analiticsweb.site (zulhqmnr@netmail[.]tk) skimmer

analiticsweb.site (zulhqmnr@netmail[.]tk) skimmer
A JavaScript skimmer that loads from analiticsweb[.]site/analytics.js - and opsec failure leads to discovery of more malicious domains.
Read more →

XBALTI Phishing Kits

XBALTI Phishing Kits
Analysis of the XBALTI phishing kits and their exfiltration techniques.
Read more →

PHP Minishell Backticks Redux

PHP Minishell Backticks Redux
A variant of the PHP backtick minishell that obfuscates a PHP superglobal to evade detection.
Read more →

Remove With Caution: root.txt -> /

Remove With Caution: root.txt - /
How admins accidentally run rm -rfv / and take down an entire hosting server with 500-3000 websites
Read more →
Disclaimer: The research posted on this website is for information purposes only. Do not use it for illegal purposes.